Skip to content
OpenAdvisories

Weakness (CWE)

CWE-467: Use of sizeof() on a Pointer Type

Variant Draft

The code calls sizeof() on a pointer type, when the programmer intended to determine the size of the data that is being pointed to.

How to prevent it (1 mitigation)

  1. Implementation

    Use expressions such as "sizeof(*pointer)" instead of "sizeof(pointer)", unless you intend to run sizeof() on a pointer type to gain some platform independence or if you are allocating a variable on the stack.

Source: MITRE CWE-467

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2026-52761

    ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong output on i386 archit…

    owasp-modsecurity ModSecurity modsecurity modsecurity Debian Ubuntu
  • Medium 6.5
    CVE-2025-33132

    Fixes to common vulnerabilities found in IBM Db2 High Performance Unload

    IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.

    IBM DB2 High Performance Unload